Secure application secrets across your team

Open-source, end-to-end encrypted platform to manage, sync and share environment variables. Phase works for your dev environment, CI pipelines and cloud infrastructure with 0 code changes or added dependencies.

phase cli

Import. Encrypt. Inject.

Import & encrypt secrets from existing .env files. Securely inject secrets into any platform or framework at runtime. No dependencies or code changes required. Explore Docs

pip install phase-cli
Plug and play integration
Inject secrets scoped only to your app as environment variables during runtime. Use process.env / os.environ.get to read them — no dependencies or code changes required.
Simplify development
Effortlessly maintain separation between dev, staging, prod environments and quickly switch in between them. Avoid using production secrets in development.
Always in sync
Import secrets from .env files and securely sync them with your team. Eliminate ad-hoc secret coordination with other teams over Slack.
Secure by default
The Phase CLI uses end-to-end encryption with private-key sharding via secret sharing schemes to avoid a single point of compromise.
Keyring integration
Phase CLI uses keyring backends such as macOS Keychain, Windows Credential Locker, KDE Wallet, GNOME Keyring and more to safely handle secret zero.
Works where you work
The Phase CLI works on your laptop, CI, Docker containers, Virtual Machines and Kubernetes clusters.
phase console

Mission Control for your app secrets

Create, manage and deploy secrets effortlessly. Manage your team & environments with granular RBAC. Keep track of changes to secrets and permissions with detailed audit logs.

Phase Console
Role-based Access Control
Separate keys for each user and environment. Manage environment permissions with granular RBAC tools.
Audit logs
Keep track of changes to secrets, user roles, permissions and access events with detailed logs.
Secret versioning
All secret changes are automatically versioned. Easily view changes with git styled diffs and roll-back changes with one click.
Point-in-time recovery
Restore entire environments to a previous version if something goes wrong. The Phase Console gives you a get-out-of-jail-free card.
Service tokens
Specifically scope and create tokens for local development, CI builds or production environments.
Secret referencing
Create references to other secrets and inherit values across environments.
integrations
Platform integrations
Phase works with all major cloud providers, build tools and CI pipelines. Native integrations keep your secrets synced with your entire stack.

Effortlessly inject or expose secrets & environment variables to your Azure pipelines or jobs.

Learn more

Sync your secrets with AWS Secrets Manager or Parameter Store. Phase integrates natively with your AWS Stack.

Learn more

Already using Hashicorp Vault? No problem! Phase integrates natively with Vault, so you don't need to rip out your existing infrastructure.

Learn more

Inject secrets directly to your applications running on Hashicorp Nomad.

Learn more

Seamlessly manage your Docker secrets and configurations with Phase for enhanced security and automation in your CI/CD pipelines.

Learn more

Automate your Kubernetes secrets management with Phase, ensuring secure, streamlined deployment processes across clusters.

Learn more

Native integration with Cloudflare pages to keep your environment variables and secrets in-sync for each build.

Learn more

Elevate your GitHub Actions with Phase by securely managing secrets and environment variables for your workflows.

Learn more

Integrate Phase with GitLab CI for dynamic secrets management and to streamline your CI/CD pipelines, enhancing productivity and security.

Learn more

Unlock powerful secrets management in your CircleCI pipelines with Phase, ensuring a secure and efficient CI/CD process.

Learn more

Optimize your Travis CI workflows with Phase for secure secrets handling and environment variables management, boosting efficiency.

Learn more

Enhance your Bitbucket Pipelines with Phase for seamless secrets and configurations management, ensuring a secure CI/CD environment.

Learn more

Leverage Phase within your Jenkins pipelines for advanced secrets management, facilitating a secure and automated build process.

Learn more

Empower your TeamCity builds with Phase for efficient secrets management, enhancing security and automation in your CI/CD pipeline.

Learn more

Streamline your Buildkite workflows with Phase’s secrets management, ensuring fast, secure, and reliable CI/CD processes.

Learn more

integrations
Framework integrations
Phase works with your favorite languages and app frameworks. Securely inject secrets into your applications at build or runtime.

Simplify your Node.js application's environment and secrets management with secure, easy-to-use Phase integration.

Learn more

Securely manage Django application secrets with Phase, ensuring your configurations are safely handled without complicating your workflow.

Learn more

Efficiently manage environment variables and secrets in your Nuxt.js projects with Phase for more streamlined and secure deployments.

Learn more

Leverage Phase with NestJS for enhanced secrets management, helping you maintain secure and manageable application configurations.

Learn more

Integrate Phase into your Next.js workflow for secure and efficient secrets management, keeping your deployment process smooth and secure.

Learn more

Use Phase to manage your Vue.js application's secrets and environment variables more securely and efficiently, enhancing your development practices.

Learn more

Streamline your Go applications using Fiber with Phase for a seamless secrets management experience that keeps your projects secure.

Learn more

Phase integration simplifies secrets management in Flask applications, ensuring your environment variables are securely handled.

Learn more

Keep your Remix projects secure with Phase, offering a straightforward approach to managing secrets and environment variables.

Learn more

Enhance your React development with Phase for an effective solution to environment and secrets management, focusing on security and simplicity.

Learn more

Implement Phase in your Svelte projects for an uncomplicated and secure way to manage secrets and configurations.

Learn more

Securely integrate your Ruby on Rails applications with Phase for efficient management of secrets and environment variables.

Learn more

Simplify secrets and environment variables management in your Gatsby projects with Phase, ensuring secure and efficient builds.

Learn more

Enhance your .NET applications with Phase for robust and secure secrets management, streamlining your development and deployment processes.

Learn more

Effortlessly manage your Laravel application's secrets with Phase, ensuring a secure and efficient development environment.

Learn more

Integrate Phase with FastAPI for straightforward and secure secrets management, improving your application's security posture.

Learn more

Merged

We build in public. Check out the latest feature drops and improvements to Phase.

CLOUD

The fastest and easiest way to get started with Phase. Spin up an app in minutes. Hosted in Frankfurt 🇩🇪

SELF-HOSTED

Run Phase on your own infrastructure and maintain full control. Perfect for customers with strict compliance requirements.